← Back

Android

android

Vendor: Google • 8,366 CVEs

CVEs (8,366)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation without a length field validation in the mobicore driver which can result in an...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation without a length field validation in the mobicore driver which can result in an undersize buffer allocation. Ultimately this can result in a kernel memory overwrite.Show less
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a video driver, a race condition exists which can potentially lead to a buffer overflow.
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a graphics driver ioctl handler, the lack of copy_from_user() function calls may result in writes to kern...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a graphics driver ioctl handler, the lack of copy_from_user() function calls may result in writes to kernel memory.Show less
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, a race condition exists which can lead to a Use After Free condition.
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a race condition exists which can lead to a Use After Free condition.
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsExt AIDL APIs are not subject to access control.
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, a simultaneous read and enable of the ETR device after changing the buffer size...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, a simultaneous read and enable of the ETR device after changing the buffer size may result in a Use After Free condition of the previous buffer.Show less
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOC_G_SDE_ROTATOR_FENCE ioctl command can be used to cause a Use After Free condition.
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the HDMI video driver function hdmi_edid_sysfs_rda_res_info(), userspace can perform an arbitrary write i...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the HDMI video driver function hdmi_edid_sysfs_rda_res_info(), userspace can perform an arbitrary write into kernel memory.Show less
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the fd allocated during the get_metadata was not closed even though the buffer allocated to the fd was freed...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the fd allocated during the get_metadata was not closed even though the buffer allocated to the fd was freed. This resulted in a failure during exit sequence.Show less
1Google
1Android
May 13, 2026
Dec 5, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in create_cal_block stale pointers are left...Show more
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails while creating a calibration block in create_cal_block stale pointers are left uncleared.Show less
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973195.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-ALPS03394571.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
5.3 MEDIUM· v3
4.6 MEDIUM· v2
An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-31097064.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894.
1Google
1Android
May 13, 2026
Nov 16, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447.